5225 matches found
Oracle VM VirtualBox Elevation of Privilege Vulnerability (CNVD-2018-02061)
Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. A security vulnerability exists in the Oracle VM VirtualBox component of Oracle Virtualization, versions...
Zimbra Collaboration Suite Cross-Site Scripting Vulnerability
Zimbra Collaboration Suite ZCS is an open source collaboration suite from the US company Zimbra, which includes WebMail, Calendar, Address Book and more. A cross-site scripting vulnerability exists in versions of ZCS prior to 8.8.0 Beta2. A remote attacker can exploit this vulnerability to inject...
UBUNTU-CVE-2016-6810
In Apache ActiveMQ 5.x before 5.14.2, an instance of a cross-site scripting vulnerability was identified to be present in the web based administration console. The root cause of this issue is improper user data output validation...
CVE-2016-10256
The Symantec ProxySG 6.5 prior to 6.5.10.6, 6.6, and 6.7 prior to 6.7.2.1 management console is susceptible to a reflected XSS vulnerability. A remote attacker can use a crafted management console URL in a phishing attack to inject arbitrary JavaScript code into the management console web client...
UBUNTU-CVE-2015-1290
The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service memory corruption or execute arbitrary code via a crafted web site...
Irssi Buffer Overflow Vulnerability
Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A heap buffer overflow vulnerability exists in versions of Irssi prior to 1.0.6 that stems from a computational error. An attacker can exploit this vulnerability to affect the stability of Irssi...
Advantech WebAccess Input Validation Vulnerability
Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An input validation vulnerability exists in versions of...
PT-2017-14611 · Mistune · Mistune
Name of the Vulnerable Software and Affected Versions: Mistune versions prior to 0.8.1 Description: The issue concerns a Cross-Site Scripting XSS vulnerability in the keyify function. This vulnerability allows remote attackers to inject arbitrary web scripts or HTML by exploiting the failure to...
Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37641)
Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUJobCountHistory Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly inspect user-submitted strings...
Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37640)
Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUBackupTargetSet Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly inspect user-submitted strings...
Puppet Enterprise console cross-site scripting vulnerability
Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is an enterprise version. console is one of the console tools. ...
PT-2019-8314 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.14 Description: An out of boundary access issue occurred in the Linux kernel, specifically in the drivers/nvme/target/fc.c file. Recommendations: For Linux kernel versions prior to 4.14, update to version 4.14...
Vim Information Disclosure Vulnerability (CNVD-2017-38252)
Vim is a text editor developed from vi. An information disclosure vulnerability exists in Vim prior to 8.0.1263. The vulnerability arises because fileio.c in Vim sets the group ownership of a .swp file to the editor's main group which may differ from the group ownership of the original file. A...
CVE-2017-2702
Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the phone...
PT-2018-8407 · Mit +4 · Kerberos +4
Name of the Vulnerable Software and Affected Versions: Kerberos versions prior to 1.16.1 Description: An authentication bypass flaw was found in the way krb5's certauth interface handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially us...
CVE-2017-16892
In Bftpd before 4.7, there is a memory leak in the file rename function...
PT-2017-14610
Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.7.1 Description An issue was discovered in the ioqueue component of Teluu pjproject pjlib and pjlib-util in PJSIP. The ioqueue component may issue a double key unregistration after an attacker initiates a socket...
AZL-7332 CVE-2017-16844 affecting package procmail for versions less than 3.22-53
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than...
Apache CouchDB Remote Code Execution Vulnerability
Apache CouchDB is the United States Apache Apache Software Foundation , a free , open source , document-oriented database , is a use of JSON as a storage format , JavaScript as a query language , MapReduce and HTTP as the API of the NoSQL database . A remote code execution vulnerability exists in...